Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: Z4MhK4S7pZwET6g1qrLdaRs+1UpWL0Z/scseo6rfqOU=
Subject key identifier: A2:36:B4:C4:37:D3:B4:C2:C1:7E:9E:DD:A4:FC:06:75:45:B1:C1:B7
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 019A71B8A7567BA1B562E6B513F99893E00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 08FF
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: 0qRj9LrzHL4IyXVudNwvwk6e5HNbu0V6++HsiiCYL4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a7:56:7b:a1:b5:62:e6:b5:13:f9:98:93:e0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=a236b4c437d3b4c2c17e9edda4fc067545b1c1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:85:8b:6d:59:5a:43:5f:06:9e:67:37:f9:
7b:f7:c1:53:f8:7b:c4:f6:4a:56:30:db:2d:05:f4:
22:18:e6:a9:eb:52:3f:2d:88:43:11:56:f4:b3:34:
38:48:c7:b2:d8:4d:5d:41:8f:6b:98:dc:78:52:b7:
53:ca:a1:21:69:df:bd:e2:e3:21:18:90:e6:09:14:
c1:9d:11:aa:0c:68:e0:4d:9a:4e:67:0e:15:1c:ca:
df:13:11:dc:71:fd:31:f9:de:28:1a:c9:d7:50:c5:
2b:a4:e0:7f:be:3f:3b:24:83:66:96:64:6f:f4:88:
57:c1:a7:ef:3c:98:b5:2c:7c:55:57:90:e4:4f:4a:
ed:e8:f0:2e:5e:e2:02:76:ab:f3:f4:89:79:65:9b:
c0:bb:16:b8:be:a1:30:15:89:0c:59:0d:46:f4:8e:
52:22:d2:d2:21:8f:1b:02:e3:ac:a8:c4:03:23:d2:
ef:05:2a:5d:cf:1b:ce:70:85:10:bc:b1:3c:55:a7:
00:7c:07:e6:5e:24:5a:e7:df:98:4a:22:d5:40:eb:
1a:3a:85:f1:9c:6c:8c:e8:cc:1f:9a:85:61:89:16:
4d:40:31:92:39:c8:f4:0c:5c:ff:4f:21:19:26:d3:
71:60:ee:d4:65:8d:8c:f7:38:a0:87:28:1e:eb:2b:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:B4:C4:37:D3:B4:C2:C1:7E:9E:DD:A4:FC:06:75:45:B1:C1:B7
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6d:1a:9e:dd:3d:99:89:f6:fe:a9:73:7a:8b:ef:95:9d:f4:
44:b8:f3:2d:f4:10:1b:e4:6e:64:6e:d2:6b:2f:48:3b:c1:c2:
20:21:de:aa:67:54:9c:65:02:92:90:a4:06:f6:ca:e8:35:5d:
88:be:fe:5d:64:2b:90:2e:45:da:60:14:15:8a:b9:35:09:2f:
df:02:0c:e8:c9:f4:21:fd:b7:f3:11:da:8e:ef:63:94:76:4d:
26:b1:9e:99:71:76:40:1c:fc:8e:02:80:a0:2b:c6:28:0b:83:
af:bc:b8:6f:0f:20:e7:09:60:ed:c6:a4:a2:1a:74:ae:cc:19:
71:44:90:89:0e:26:0e:9b:7b:f2:ee:fb:19:75:b1:50:88:22:
f5:e9:8f:c0:93:4c:79:15:c0:b8:cd:55:c6:82:17:45:49:84:
39:9c:9a:0e:c5:d9:a9:59:67:66:61:dd:6e:86:a8:9f:be:fe:
65:7e:e1:03:a3:a0:e4:39:03:29:76:c7:6c:03:73:25:ff:fc:
df:bf:05:6f:60:cc:37:5a:b3:84:b9:1a:4d:eb:2e:06:f2:d5:
63:1d:b8:b4:ef:45:88:1f:d6:23:1a:e6:89:79:90:e2:dd:5d:
2b:58:14:8b:5a:d2:e2:1e:de:44:96:5e:27:d6:e8:b4:75:30:
02:98:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:00 2025 by rpki-client